IPSEC Tunnel Routing question

Matthew Faircliff matt at databias.co.za
Fri Dec 5 01:23:40 PST 2003


Hello Tom,

So I assume by working you mean that the two computers can ping one
another? 

If so, simply set the computer in Builing B to have a default route to
the IP of the computer in Building A:

[Building B]# route add default 10.0.0.1

Where 10.0.0.1 is the IP of the computer in Building A. Also, ensure
that any firewall in A allows traffic from Building B to flow in and
out router etc.

HTH.

Matthew Faircliff

On Thu, Dec 04, 2003 at 06:50:08PM -0500, Tom Thompson wrote:
Date: Thu,  4 Dec 2003 18:50:08 -0500
From: "Tom Thompson" <tomt at callcds.com>
To: <questions at freebsd.org>
X-Mailer: <IMail v8.04>
Subject: IPSEC Tunnel Routing question

I would like to route all traffic over a gif/ipsec tunnel

I have the following situation
Existing internet connection in building A
Building to building wireless(between building A and Building B)

To secure the traffic going across the wireless I would like to run an 
ipsec tunnel between freebsd 5.1 based machines sitting at Building A 
and Building B.  I have the tunnels up and running but I am experiencing 
a problem with routing.  Building B does not have an internet connection 
so it needs to use the internet connection at Building A.

To lay it out in more details
Router at building A connections to the internet
FreeBSD 5.1 machine at Building A connects to router and to wireless bridges
FreeBSD 5.1 machine at Building B connects to Wireless bridges and internal network

What do I need to do you get traffic to flow from Building B to 
Building A and out A's internet connection?

I have tried setting building B defaultrouter to building A internal address(other side of GIF tunnel)

Thanks
Tom
_______________________________________________
freebsd-questions at freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"



More information about the freebsd-questions mailing list